Static task
static1
Behavioral task
behavioral1
Sample
0e9cb6315279f03c8b063ed2ff8717e8_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e9cb6315279f03c8b063ed2ff8717e8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e9cb6315279f03c8b063ed2ff8717e8_JaffaCakes118
-
Size
28KB
-
MD5
0e9cb6315279f03c8b063ed2ff8717e8
-
SHA1
49511ce71c58af09be22a4bf73573ce93645b748
-
SHA256
3fcc5e2ba370453794a258a798abdd63c5a520655375f9e7912d8a54cbeb514e
-
SHA512
0f839b50628d23aedc3b6165b5f13a0a50a62991aa43f6f783bccb5c6d154b186c319fd4c7126c9e48da0150d9dd8ac2847041e19abb812a8f0189986a1b3ff5
-
SSDEEP
24:wanULBvu7NxvhXNRyKkHhmGtNJiFO4/Cimh4hUf/PXk5VLV31J2NX:fnULBG5zX6skTiv6im6yf/vk5Rk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e9cb6315279f03c8b063ed2ff8717e8_JaffaCakes118
Files
-
0e9cb6315279f03c8b063ed2ff8717e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE